Maxim Levitsky a17f2f2c89 KVM: nSVM: always intercept VMLOAD/VMSAVE when nested (CVE-2021-3656) ...

commit c7dfa4009965a9b2d7b329ee970eb8da0d32f0bc upstream.

If L1 disables VMLOAD/VMSAVE intercepts, and doesn't enable
Virtual VMLOAD/VMSAVE (currently not supported for the nested hypervisor),
then VMLOAD/VMSAVE must operate on the L1 physical memory, which is only
possible by making L0 intercept these instructions.

Failure to do so allowed the nested guest to run VMLOAD/VMSAVE unintercepted,
and thus read/write portions of the host physical memory.

Fixes: 89c8a4984fc9 ("KVM: SVM: Enable Virtual VMLOAD VMSAVE feature")

Suggested-by: Paolo Bonzini <pbonzini@redhat.com>
Signed-off-by: Maxim Levitsky <mlevitsk@redhat.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2021-08-18 08:57:04 +02:00

..

alpha

alpha: Send stop IPI to send to online CPUs

2021-08-12 13:21:05 +02:00

arc

ARCv2: save ABI registers across signal handling

2021-06-23 14:41:29 +02:00

arm

omap5-board-common: remove not physically existing vdds_1v8_main fixed-regulator

2021-08-12 13:20:55 +02:00

arm64

arm64: fix compat syscall return truncation

2021-08-12 13:21:05 +02:00

c6x

mm: consolidate pgtable_cache_init() and pgd_cache_init()

2019-09-24 15:54:09 -07:00

csky

csky: change a Kconfig symbol name to fix e1000 build error

2021-04-28 13:19:16 +02:00

h8300

h8300: fix PREEMPTION build, TI_PRE_COUNT undefined

2021-02-17 10:35:18 +01:00

hexagon

hexagon: use common DISCARDS macro

2021-07-20 16:10:50 +02:00

ia64

ia64: mca_drv: fix incorrect array size calculation

2021-07-14 16:53:19 +02:00

m68k

m68k: atari: Fix ATARI_KBD_CORE kconfig unmet dependency warning

2021-07-14 16:53:22 +02:00

microblaze

microblaze: Prevent the overflow of the start

2020-02-24 08:37:02 +01:00

mips

MIPS: Malta: Do not byte-swap accesses to the CBUS UART

2021-08-12 13:21:02 +02:00

nds32

nds32: fix up stack guard gap

2021-07-28 13:31:01 +02:00

nios2

nios2 update for v5.4-rc1

2019-09-27 13:02:19 -07:00

openrisc

openrisc: Define memory barrier mb

2021-06-03 08:59:11 +02:00

parisc

parisc: avoid a warning on u8 cast for cmpxchg on u8 pointers

2021-04-14 08:24:11 +02:00

powerpc

powerpc/kprobes: Fix kprobe Oops happens in booke

2021-08-18 08:57:01 +02:00

riscv

riscv: Use -mno-relax when using lld linker

2021-06-18 09:58:58 +02:00

s390

s390/boot: fix use of expolines in the DMA code

2021-07-28 13:30:58 +02:00

sh

sh: dma: fix kconfig dependency for G2_DMA

2021-01-27 11:47:52 +01:00

sparc

sparc64: Fix opcode filtering in handling of no fault loads

2021-03-30 14:35:22 +02:00

um

um: fix error return code in winch_tramp()

2021-07-20 16:10:49 +02:00

unicore32

mm: treewide: clarify pgtable_page_{ctor,dtor}() naming

2019-09-26 10:10:44 -07:00

x86

KVM: nSVM: always intercept VMLOAD/VMSAVE when nested (CVE-2021-3656)

2021-08-18 08:57:04 +02:00

xtensa

xtensa: move coprocessor_flush to the .text section

2021-04-07 14:47:42 +02:00

.gitignore

…

Kconfig

Revert: "ring-buffer: Remove HAVE_64BIT_ALIGNED_ACCESS"

2020-12-30 11:51:47 +01:00